Exam 5: Corporate Governance and IT

The ____ is an international set of risk and capital management requirements designed to ensure that banks hold capital reserves commensurate to the risk banks assume through their lending and investment practices.

Floor ____________________ receive additional training in crowd control,first aid,CPR,operation of defibrillators,and helping handicapped workers evacuate.

The ____ requires employers to use national standards for electronic healthcare transactions with insurers and healthcare providers,and requires that employers ensure the security and privacy of employee health data.

A ____ plan defines the people and procedures required to ensure timely and orderly resumption of an organization's essential,time-sensitive processes with minimal interruption.

Enlightened organizations recognize that IT governance is not the responsibility of IT management but of executive management,including the board of directors.

Discuss the responsibilities of floor wardens.

The ____ is a set of guidelines initially formulated by the UK government in the late 1980s and widely used today throughout Europe and the United States to standardize,integrate,and manage IT service delivery.

____ must take leadership for creating an effective partnership between the IT organization and the rest of the organization.

A(n)____ business function,while significant,can be unavailable for up to a few days without causing severe problems.

The ITIL or COBIT governance frameworks provide an excellent set of best practices for various IT-related processes.

Internal controls play a key role in preventing and detecting ____________________ and protecting the organization's resources.

Discuss several reasons why Harley-Davidson decided to convert to the COBIT control framework.

____ is the set of processes,customs,rules,procedures,policies,and traditions that determine how to direct and control management activities.

IT-related initiatives are generally simple and straightforward.

____________________ includes defining the decision-making process itself,as well as defining who makes the decisions,who is held accountable for results,and how the results of decisions are communicated,measured,and monitored.

A key to the successful introduction and adoption of more effective internal controls is ensuring that managers understand why they need to care about improved internal controls.

Mitigating IT-related risks means embedding ____ and internal controls in the organization.

___________________ is the effort made by an ordinarily prudent or reasonable party to avoid harm to another party.Failure to make this effort may be considered negligence.

A(n)___________________ plan is a subset of the business continuity plan,and focuses on keeping components of the IT infrastructure functioning during a disaster or recovering them quickly afterward.

Section ____________________ of the Sarbanes-Oxley Act requires a signed statement by the CEO and CFO attesting that the information in any of their firm's SEC filings is accurate,with stiff penalties for false attestation.